Privacy Policy

1. Introduction

Welcome to hoanmy.health, operated by Hoan My Medical Corporation. This website serves as a healthcare directory and informational resource for Vietnam's premier private healthcare network.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. By accessing or using hoanmy.health, you agree to the terms outlined in this policy. If you do not agree, please discontinue use of the site.

2. Information We Collect

We may collect the following types of information:

• Browsing Data: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of visits, and time spent on pages.
• Cookies and Tracking Technologies: Small data files stored on your device to improve your browsing experience and help us understand site usage patterns.
• Contact Form Submissions: If you use our contact form, we collect the information you voluntarily provide, including your name, email address, phone number, and message content.

We do not collect sensitive health information through this website. The site provides general healthcare directory information only.

3. How We Use Information

We use the information we collect for the following purposes:

• Site Improvement: Analyzing usage patterns to enhance website functionality, content, and user experience.
• Responding to Inquiries: Processing and responding to contact form submissions and user questions.
• Analytics: Generating aggregated, anonymized statistics about site traffic and user behavior to inform improvements.
• Security: Monitoring for and preventing fraudulent activity, unauthorized access, and other security threats.

4. Cookies

Our website uses cookies to enhance your experience. We use two categories of cookies:

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect website functionality.

5. Data Protection

We are committed to protecting your personal data and employ the following safeguards:

• HTTPS Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL protocols.
• No Sale of Data: We do not sell, trade, or rent your personal information to third parties under any circumstances.
• Access Controls: Personal data access is restricted to authorized personnel who need it to perform their duties.
• Regular Reviews: We periodically review our data collection, storage, and processing practices to ensure they meet current security standards.

6. Vietnam PDPD Compliance

We comply with Vietnam's Personal Data Protection Decree (Decree 13/2023/ND-CP), which took effect on July 1, 2023. Under the PDPD:

• Health data is classified as sensitive personal data and receives heightened protection. While this website does not collect health data directly, we maintain the highest standards of data protection given our role in the healthcare sector.
• We process personal data only with your consent or as permitted by applicable law.
• You have the right to access, correct, and delete your personal data held by us.
• We conduct Data Protection Impact Assessments as required for processing activities that may pose high risks to individuals.
• Cross-border data transfers comply with the requirements set forth in the decree.

7. GDPR Notice

For visitors from the European Union (EU) and European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR).

Legal Basis for Processing:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes (e.g., contact form submissions).
• Legitimate Interests: Where processing is necessary for our legitimate interests, such as improving website functionality and security, provided these interests do not override your rights.

Your Rights Under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us using the information provided in the Contact section below.

8. Third-Party Services

Our website uses the following third-party services that may collect data:

• Google Fonts: Web fonts are loaded from Google's servers. Google may collect your IP address and browser information when fonts are requested. See Google's Privacy Policy.
• Font Awesome CDN (cdnjs/Cloudflare): Icon fonts are served via Cloudflare's CDN. Cloudflare may process connection metadata. See Cloudflare's Privacy Policy.
• Bootstrap CDN (jsDelivr): CSS framework files are loaded from jsDelivr's CDN. See jsDelivr's Privacy Policy.

We do not control the data practices of these third-party providers. We recommend reviewing their respective privacy policies.

9. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will take steps to delete that information from our systems.

10. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify you through a prominent notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Your Rights

Regardless of your location, you have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete personal data.
• Deletion: You may request that we delete your personal data, subject to any legal obligations requiring us to retain it.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.